@aws-blocks/core 0.1.0

package/dist/scripts/cdk-telemetry-env.test.js

@@ -0,0 +1,56 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+import { describe, it, afterEach } from 'node:test';
+import assert from 'node:assert';
+import { mkdirSync, writeFileSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { getCdkTelemetryEnv } from './cdk-telemetry-env.js';
+describe('getCdkTelemetryEnv', () => {
+    const originalEnv = { ...process.env };
+    const originalCwd = process.cwd();
+    afterEach(() => {
+        process.env = { ...originalEnv };
+        process.chdir(originalCwd);
+    });
+    it('returns CDK_CLI_USERAGENT when telemetry is enabled', () => {
+        delete process.env.AWS_BLOCKS_DISABLE_TELEMETRY;
+        // chdir to a temp dir with no .blocks/config.json so defaults apply
+        const tmp = join(tmpdir(), `cdk-telemetry-test-${Date.now()}`);
+        mkdirSync(tmp, { recursive: true });
+        process.chdir(tmp);
+        const env = getCdkTelemetryEnv('sandbox');
+        assert.ok('CDK_CLI_USERAGENT' in env, 'should have CDK_CLI_USERAGENT');
+        assert.ok(!('CDK_DISABLE_CLI_TELEMETRY' in env), 'should NOT have CDK_DISABLE_CLI_TELEMETRY');
+        assert.match(env.CDK_CLI_USERAGENT, /^aws-blocks\/.*\/sandbox$/);
+        rmSync(tmp, { recursive: true, force: true });
+    });
+    it('returns CDK_DISABLE_CLI_TELEMETRY when env var disables telemetry', () => {
+        process.env.AWS_BLOCKS_DISABLE_TELEMETRY = '1';
+        const env = getCdkTelemetryEnv('production');
+        assert.deepStrictEqual(env, { CDK_DISABLE_CLI_TELEMETRY: '1' });
+        assert.ok(!('CDK_CLI_USERAGENT' in env), 'should NOT have CDK_CLI_USERAGENT');
+    });
+    it('returns CDK_DISABLE_CLI_TELEMETRY when project config disables telemetry', () => {
+        delete process.env.AWS_BLOCKS_DISABLE_TELEMETRY;
+        const tmp = join(tmpdir(), `cdk-telemetry-test-${Date.now()}`);
+        mkdirSync(join(tmp, '.blocks'), { recursive: true });
+        writeFileSync(join(tmp, '.blocks', 'config.json'), JSON.stringify({ telemetry: { enabled: false } }));
+        process.chdir(tmp);
+        const env = getCdkTelemetryEnv('sandbox');
+        assert.deepStrictEqual(env, { CDK_DISABLE_CLI_TELEMETRY: '1' });
+        assert.ok(!('CDK_CLI_USERAGENT' in env), 'should NOT have CDK_CLI_USERAGENT');
+        rmSync(tmp, { recursive: true, force: true });
+    });
+    it('includes the command name in the user-agent string', () => {
+        delete process.env.AWS_BLOCKS_DISABLE_TELEMETRY;
+        const tmp = join(tmpdir(), `cdk-telemetry-test-${Date.now()}`);
+        mkdirSync(tmp, { recursive: true });
+        process.chdir(tmp);
+        const sandboxEnv = getCdkTelemetryEnv('sandbox');
+        const prodEnv = getCdkTelemetryEnv('production');
+        assert.ok(sandboxEnv.CDK_CLI_USERAGENT.endsWith('/sandbox'));
+        assert.ok(prodEnv.CDK_CLI_USERAGENT.endsWith('/production'));
+        rmSync(tmp, { recursive: true, force: true });
+    });
+});

package/dist/scripts/cleanup.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export declare function cleanup(): Promise<void>;
+//# sourceMappingURL=cleanup.d.ts.map

package/dist/scripts/cleanup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cleanup.d.ts","sourceRoot":"","sources":["../../src/scripts/cleanup.ts"],"names":[],"mappings":";AAOA,wBAAsB,OAAO,kBA0B5B"}

package/dist/scripts/cleanup.js

@@ -0,0 +1,35 @@
+#!/usr/bin/env node
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+import { execSync } from 'node:child_process';
+import { trackCommand } from '../telemetry/trackCommand.js';
+export async function cleanup() {
+    return trackCommand('cleanup', async () => {
+        console.log('🧹 Cleaning up Blocks processes...');
+        // Find and kill processes on common Blocks ports
+        const ports = [3000, 3001, 3002, 3003];
+        for (const port of ports) {
+            try {
+                const result = execSync(`lsof -ti:${port}`, { encoding: 'utf-8' }).trim();
+                if (result) {
+                    const pids = result.split('\n');
+                    for (const pid of pids) {
+                        try {
+                            execSync(`kill ${pid}`);
+                            console.log(`✓ Killed process ${pid} on port ${port}`);
+                        }
+                        catch { }
+                    }
+                }
+            }
+            catch {
+                // No process on this port
+            }
+        }
+        console.log('✓ Cleanup complete');
+    });
+}
+cleanup().catch((error) => {
+    console.error('Error during cleanup:', error);
+    process.exit(1);
+});

package/dist/scripts/console.d.ts

@@ -0,0 +1,6 @@
+export interface ConsoleOptions {
+    stackId?: string;
+    outputsFile?: string;
+}
+export declare function openConsole(options: ConsoleOptions): Promise<void>;
+//# sourceMappingURL=console.d.ts.map

package/dist/scripts/console.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"console.d.ts","sourceRoot":"","sources":["../../src/scripts/console.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,cAAc,iBAqBxD"}

package/dist/scripts/console.js

@@ -0,0 +1,25 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+import { execFileSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+import { trackCommand } from '../telemetry/trackCommand.js';
+export async function openConsole(options) {
+    return trackCommand('console', async () => {
+        let stackName;
+        if (options.stackId) {
+            stackName = options.stackId;
+        }
+        else if (options.outputsFile) {
+            const outputs = JSON.parse(readFileSync(options.outputsFile, 'utf-8'));
+            stackName = Object.keys(outputs)[0];
+        }
+        else {
+            throw new Error('Must provide either stackId or outputsFile');
+        }
+        const region = execFileSync('aws', ['configure', 'get', 'region'], { encoding: 'utf-8' }).trim() || 'us-east-1';
+        const stackUrl = `https://${region}.console.aws.amazon.com/cloudformation/home?region=${region}#/stacks?filteringText=${encodeURIComponent(stackName)}`;
+        console.log('Opening AWS Console...');
+        console.log(stackUrl);
+        execFileSync('open', [stackUrl], { stdio: 'inherit' });
+    });
+}

package/dist/scripts/deploy.d.ts

@@ -0,0 +1,6 @@
+export interface DeployOptions {
+    cdkAppPath: string;
+    projectRoot: string;
+}
+export declare function deploy(options: DeployOptions): Promise<void>;
+//# sourceMappingURL=deploy.d.ts.map

package/dist/scripts/deploy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/scripts/deploy.ts"],"names":[],"mappings":"AAYA,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,iBAwFlD"}

package/dist/scripts/deploy.js

@@ -0,0 +1,82 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+import { execFileSync } from 'node:child_process';
+import { readFileSync, writeFileSync, mkdirSync } from 'node:fs';
+import { join, resolve, dirname } from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { ensureSecrets, loadProductionEnv } from './ensure-secrets.js';
+import { applyExternalMigrations } from './external-migrations-step.js';
+import { trackCommand } from '../telemetry/trackCommand.js';
+import { getCdkTelemetryEnv } from './cdk-telemetry-env.js';
+export async function deploy(options) {
+    return trackCommand('deploy', async () => {
+        console.log('🏗️  Preparing deployment...');
+        // Load production environment (from .env.production or CI env vars)
+        loadProductionEnv();
+        process.env.BLOCKS_STAGE = 'production';
+        // Provision secrets for production
+        const secrets = await ensureSecrets('production');
+        if (secrets.created.length > 0 || secrets.updated.length > 0) {
+            console.log(`🔐 Secrets provisioned: ${[...secrets.created, ...secrets.updated].join(', ')}`);
+        }
+        // Apply external-database migrations to the production database before
+        // deploying. No-op unless this app uses an external DB and has ./migrations.
+        await applyExternalMigrations({ stage: 'production' });
+        // Import backend to populate BB registry for telemetry
+        const foundationPath = resolve(options.projectRoot, 'aws-blocks/index.ts');
+        try {
+            await import(pathToFileURL(foundationPath).href);
+        }
+        catch { /* ignore import errors */ }
+        // Generate client code FIRST (before cdk deploy triggers the Vite build)
+        const clientPath = join(dirname(foundationPath), 'client.js');
+        console.log('📝 Generating client code...');
+        const __dirname = dirname(fileURLToPath(import.meta.url));
+        const workerPath = join(__dirname, 'generate-client-worker.js');
+        execFileSync('node', ['--conditions=aws-runtime', '--import', 'tsx', workerPath, foundationPath, clientPath], {
+            stdio: 'inherit',
+            env: { ...process.env, NODE_OPTIONS: '' },
+        });
+        console.log('🚀 Deploying to AWS...');
+        console.log('   (This may take a few minutes on first deploy)');
+        console.log('   - Backend API (Lambda + API Gateway)');
+        console.log('   - Frontend hosting (S3 + CloudFront)');
+        try {
+            execFileSync("npx", [
+                "cdk", "deploy",
+                "--require-approval", "never",
+                "--outputs-file", ".blocks-sandbox/outputs.json",
+                "--context", `projectRoot=${options.projectRoot}`,
+            ], {
+                stdio: 'inherit',
+                cwd: options.projectRoot,
+                env: {
+                    ...process.env,
+                    NODE_OPTIONS: '--conditions=cdk',
+                    ...getCdkTelemetryEnv('production')
+                }
+            });
+        }
+        catch (error) {
+            console.error('\n❌ Deployment failed.');
+            throw error;
+        }
+        const outputs = JSON.parse(readFileSync(join(options.projectRoot, '.blocks-sandbox', 'outputs.json'), 'utf-8'));
+        const stackOutputs = Object.values(outputs)[0];
+        const apiUrl = stackOutputs.ApiUrl;
+        const hostingUrl = Object.entries(stackOutputs).find(([key]) => key.includes('Hosting') && key.includes('Url'))?.[1];
+        if (!apiUrl) {
+            throw new Error('Could not find API URL in CDK outputs');
+        }
+        // Write config.json with API endpoint
+        const config = { apiUrl, environment: 'production' };
+        const outDir = join(options.projectRoot, '.blocks-sandbox');
+        mkdirSync(outDir, { recursive: true });
+        writeFileSync(join(outDir, 'config.json'), JSON.stringify(config, null, 2));
+        console.log('\n✅ Deployment complete!');
+        console.log(`\n📡 API URL: ${apiUrl}`);
+        if (hostingUrl) {
+            console.log(`🌐 Frontend URL: ${hostingUrl}`);
+        }
+    });
+}

package/dist/scripts/destroy.d.ts

@@ -0,0 +1,6 @@
+export interface DestroyOptions {
+    cdkAppPath: string;
+    projectRoot: string;
+}
+export declare function destroy(options: DestroyOptions): Promise<void>;
+//# sourceMappingURL=destroy.d.ts.map

package/dist/scripts/destroy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destroy.d.ts","sourceRoot":"","sources":["../../src/scripts/destroy.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,wBAAsB,OAAO,CAAC,OAAO,EAAE,cAAc,iBA6BpD"}

package/dist/scripts/destroy.js

@@ -0,0 +1,30 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+import { execFileSync } from 'node:child_process';
+import { trackCommand } from '../telemetry/trackCommand.js';
+import { getCdkTelemetryEnv } from './cdk-telemetry-env.js';
+export async function destroy(options) {
+    return trackCommand('destroy', async () => {
+        console.log('🗑️  Destroying production stack...');
+        try {
+            execFileSync("npx", [
+                "cdk", "destroy",
+                "--force",
+                "--context", `projectRoot=${options.projectRoot}`,
+            ], {
+                stdio: 'inherit',
+                cwd: options.projectRoot,
+                env: {
+                    ...process.env,
+                    NODE_OPTIONS: '--conditions=cdk',
+                    ...getCdkTelemetryEnv('production')
+                }
+            });
+        }
+        catch (error) {
+            console.error('\n❌ Destroy failed.');
+            throw error;
+        }
+        console.log('\n✅ Production stack destroyed!');
+    });
+}

package/dist/scripts/dev-server-cors.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dev-server-cors.test.d.ts.map

package/dist/scripts/dev-server-cors.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-server-cors.test.d.ts","sourceRoot":"","sources":["../../src/scripts/dev-server-cors.test.ts"],"names":[],"mappings":""}

package/dist/scripts/dev-server-cors.test.js

@@ -0,0 +1,23 @@
+// Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+// SPDX-License-Identifier: Apache-2.0
+import { describe, it } from 'node:test';
+import assert from 'node:assert';
+import { resolveDevCorsOrigin, LOCALHOST_PATTERN } from './dev-server.js';
+describe('resolveDevCorsOrigin — dev server CORS', () => {
+    it('reflects localhost origin back as-is', () => {
+        assert.strictEqual(resolveDevCorsOrigin('http://localhost:3000'), 'http://localhost:3000');
+    });
+    it('reflects 127.0.0.1 origin back as-is', () => {
+        assert.strictEqual(resolveDevCorsOrigin('http://127.0.0.1:3000'), 'http://127.0.0.1:3000');
+    });
+    it('returns fallback http://localhost:3000 for non-localhost origin', () => {
+        assert.strictEqual(resolveDevCorsOrigin('https://evil.com'), 'http://localhost:3000');
+    });
+    it('returns fallback http://localhost:3000 when origin is empty', () => {
+        assert.strictEqual(resolveDevCorsOrigin(''), 'http://localhost:3000');
+    });
+    it('rejects subdomain impersonation (evil.localhost)', () => {
+        assert.strictEqual(LOCALHOST_PATTERN.test('http://localhost.evil.com'), false);
+        assert.strictEqual(resolveDevCorsOrigin('http://localhost.evil.com'), 'http://localhost:3000');
+    });
+});

package/dist/scripts/dev-server-telemetry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=dev-server-telemetry.test.d.ts.map

package/dist/scripts/dev-server-telemetry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-server-telemetry.test.d.ts","sourceRoot":"","sources":["../../src/scripts/dev-server-telemetry.test.ts"],"names":[],"mappings":""}

package/dist/scripts/dev-server-telemetry.test.js

@@ -0,0 +1,113 @@
+import { describe, it, afterEach } from 'node:test';
+import assert from 'node:assert';
+import { createServer } from 'node:http';
+import { writeFileSync, mkdirSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { tmpdir } from 'node:os';
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { dirname } from 'node:path';
+const __dirname = dirname(fileURLToPath(import.meta.url));
+describe('dev-server telemetry integration', () => {
+    let telemetryServer = null;
+    let devProcess = null;
+    let tmpDir = null;
+    afterEach(async () => {
+        if (devProcess && !devProcess.killed) {
+            devProcess.kill('SIGTERM');
+            await new Promise(r => setTimeout(r, 500));
+            if (!devProcess.killed)
+                devProcess.kill('SIGKILL');
+        }
+        if (telemetryServer) {
+            telemetryServer.close();
+        }
+        if (tmpDir) {
+            rmSync(tmpDir, { recursive: true, force: true });
+        }
+    });
+    it('sends telemetry event when dev server starts successfully', async () => {
+        const received = [];
+        // 1. Start a mock telemetry endpoint
+        telemetryServer = await new Promise((resolve) => {
+            const s = createServer((req, res) => {
+                let body = '';
+                req.on('data', (chunk) => { body += chunk; });
+                req.on('end', () => {
+                    received.push(body);
+                    res.writeHead(200);
+                    res.end();
+                });
+            });
+            s.listen(0, '127.0.0.1', () => resolve(s));
+        });
+        const addr = telemetryServer.address();
+        // 2. Create a minimal backend file and preload script in a temp directory
+        tmpDir = join(tmpdir(), `dev-telemetry-test-${Date.now()}`);
+        mkdirSync(tmpDir, { recursive: true });
+        writeFileSync(join(tmpDir, 'backend.ts'), `export const hello = { greet: () => 'world' };\n`);
+        // Polyfill process.loadEnvFile for Node <21
+        writeFileSync(join(tmpDir, 'preload.mjs'), `
+if (!process.loadEnvFile) {
+  process.loadEnvFile = () => { throw Object.assign(new Error('ENOENT'), { code: 'ENOENT' }); };
+}
+`);
+        const scriptContent = `
+import { startDevServer } from '${join(__dirname, 'dev-server.js').replace(/\\/g, '/')}';
+startDevServer({ backendPath: '${join(tmpDir, 'backend.ts').replace(/\\/g, '/')}', port: 19877 });
+`;
+        const scriptPath = join(tmpDir, 'run-dev.ts');
+        writeFileSync(scriptPath, scriptContent);
+        // 3. Start the dev server as a child process with telemetry endpoint configured
+        const tsxBin = join(__dirname, '..', '..', '..', '..', 'node_modules', '.bin', 'tsx');
+        devProcess = spawn(tsxBin, ['--import', join(tmpDir, 'preload.mjs'), scriptPath], {
+            env: {
+                ...process.env,
+                BLOCKS_TELEMETRY_ENDPOINT: `http://127.0.0.1:${addr.port}/collect`,
+                AWS_BLOCKS_DISABLE_TELEMETRY: '',
+                CI: '',
+                CONTINUOUS_INTEGRATION: '',
+                BUILD_NUMBER: '',
+                CODEBUILD_BUILD_ID: '',
+                GITHUB_ACTIONS: '',
+                GITLAB_CI: '',
+                CIRCLECI: '',
+                JENKINS_URL: '',
+                TF_BUILD: '',
+                BITBUCKET_BUILD_NUMBER: '',
+                BUILDKITE: '',
+                BLOCKS_DEV_QUIET: '1',
+            },
+            cwd: tmpDir,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let stdout = '';
+        let stderr = '';
+        devProcess.stdout?.on('data', (d) => { stdout += d.toString(); });
+        devProcess.stderr?.on('data', (d) => { stderr += d.toString(); });
+        // 4. Wait for telemetry event to arrive (up to 15 seconds)
+        const deadline = Date.now() + 15_000;
+        while (received.length === 0 && Date.now() < deadline) {
+            await new Promise(r => setTimeout(r, 200));
+        }
+        // 5. Verify a telemetry event was received
+        assert.ok(received.length >= 1, `Expected telemetry event but received ${received.length}. stdout: ${stdout.slice(0, 500)}, stderr: ${stderr.slice(0, 500)}`);
+        const parsed = JSON.parse(received[0]);
+        assert.strictEqual(parsed.telemetryVersion, '1.0.0');
+        assert.strictEqual(parsed.event.command, 'dev');
+        assert.strictEqual(parsed.event.state, 'SUCCESS');
+        assert.ok(parsed.event.duration >= 0);
+        assert.ok(parsed.identifiers.installationId);
+        assert.ok(parsed.identifiers.projectId);
+        assert.ok(parsed.identifiers.eventId);
+        assert.ok(parsed.identifiers.timestamp);
+        assert.ok(parsed.environment.os);
+        assert.ok(parsed.environment.nodeVersion);
+        assert.strictEqual(typeof parsed.environment.ci, 'boolean');
+        // Verify no extra top-level fields (server uses additionalProperties: false)
+        const allowedTopLevel = ['telemetryVersion', 'identifiers', 'event', 'environment', 'product', 'counters'];
+        for (const key of Object.keys(parsed)) {
+            assert.ok(allowedTopLevel.includes(key), `Unexpected top-level field: ${key}`);
+        }
+    });
+});

package/dist/scripts/dev-server.d.ts

@@ -0,0 +1,21 @@
+export declare const LOCALHOST_PATTERN: RegExp;
+/**
+ * Resolve the CORS origin for the dev server.
+ * Reflects back origins matching localhost/127.0.0.1; otherwise returns the fallback.
+ */
+export declare function resolveDevCorsOrigin(origin: string): string;
+export interface DevServerOptions {
+    /** Customer-facing port. Default: 3000. */
+    port?: number;
+    /** Path to the backend index.ts. */
+    backendPath: string;
+    /**
+     * Command to start the frontend dev server (e.g., 'npx vite --port 3100 --strictPort').
+     * Omit to run backend-only (no frontend proxy).
+     */
+    frontendCommand?: string;
+    /** Port the frontend dev server listens on. Default: 3100. */
+    frontendPort?: number;
+}
+export declare function startDevServer(options: DevServerOptions): Promise<void>;
+//# sourceMappingURL=dev-server.d.ts.map

package/dist/scripts/dev-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dev-server.d.ts","sourceRoot":"","sources":["../../src/scripts/dev-server.ts"],"names":[],"mappings":"AAmCA,eAAO,MAAM,iBAAiB,QAAiD,CAAC;AAEhF;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,MAAM,WAAW,gBAAgB;IAC/B,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAmCD,wBAAsB,cAAc,CAAC,OAAO,EAAE,gBAAgB,iBAiP7D"}